DATA PROTECTION POLICY

1. About this Policy

2. Who are we?

3. Personal data we collect

4. Data storage and retention

5. Sharing your personal data

6. International transfers

7. Technical and organizational security measures

8. Your rights

9. Lodge a complaint

1. About this Policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (“GDPR”) and the Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”), your privacy and the security of your personal data is very important to us. Because of that, this Data Protection Notice tells you who we are, what personal data we collect about you when you use this website, why we do it and on what legal grounds, who we share it with, for how long we keep it, where we transfer it to and how we ensure its security, and describes the rights you have to your respect personal data.

2. Who are we?

‘Sigma Cognition S.L.’ (previously known as Artificial Cognition, S.L.) is a company incorporated under the laws of Spain with registered office at Avenida de Burgos 114, Madrid, Spain (“Sigma” or “us”). Given what we do, the protection of personal data is of the essence to our business. If you have any questions about this Policy or, in general, about how we process your Personal Data please contact our DPO at dpo@sigma-ai.com

3. Personal data we collect

All personal data collected in this website is strictly necessary, whether it is the information you give us to contact you or information we collected automatically:

  • Information you give us. This is information about you that you give us by filling in the contact form on this site, like name, e-mail, contact details and all the information you decide to provide us via the contact form.

We process this personal data to (i) provide you with the information on our products and services that you request from us, as well as for (ii) informing you with information about new products and services or sending you newsletters you signed up to receive.

The processing of this data is necessary for the purposes of (i) the legitimate interests pursued by us in order to manage your requests for information on the products and services offered by Sigma and, (ii) for marketing purposes based on your consent when you agree to receive personalized information, both to which you can object or opt-out (confirm section ‘8. Your rights’ below).

Information we collect automatically. We automatically collect technical information about your visit through tracking tools such web cookies, which are stored by your browser and allow our website to distinguish you from other users, which helps us to provide you with a good experience when you browse our website and allows us to improve it. Certain areas of the website also use cookies to understand more about you, so we can offer you a more personalized browsing experience. We process this personal data to ensure that the content from our site is presented in the most effective manner for you and for your computer; to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes; to allow you to participate in interactive features of our service, when you choose to do so; as part of our efforts to keep our site safe and secure; to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you; to make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them. You can find all the details about this in our Cookie Policy. The processing of this data is necessary for the purposes of (i) the legitimate interests pursued by us in order to manage and monitor our website so we may provide you a good browsing experience and, (ii) for marketing purposes based on your consent when you when you give your consent by setting cookies, both to which you can object or opt-out (confirm section ‘8. Your rights’ below).

4. Data storage and retention

The protection of your personal data is important to us. Because of that, we will only store your personal data for the time strictly necessary for the purposes for which it has been collected and with the deadlines determined by law. The retention period of your data will be determined accordingly to the as long as it takes to deal with your application or request and for the data that you gave your consent to, for as long as you maintain such consent. Other than that, we will not process the data unless it is necessary for the formulation, exercise or defense of claims or when it’s required by the Public Administration, Judges and Courts.  We will delete or anonymize any other personal data we may hold about you, unless we need to keep it to comply with legal obligations, to verify whether our legitimate interests override yours or if you need it for the establishment, exercise or defense of legal claims.

5. Sharing your personal data

– We may communicate the personal data you provide through this Website to: Public authorities, regulators or governmental or jurisdictional bodies in those cases in which it is necessary to do so by law or local regulations;

– Affiliates and related companies of our Group, for internal administrative purposes.

In addition, we rely on the collaboration of some third-party service providers who have access and process your personal data on our behalf. For example, we engage service providers to provide, run and support our IT infrastructure (such as identity management, hosting, data analysis, back-up, security and cloud storage services) and for the storage and secure disposal of our hard copy files. We follow strict criteria for the selection of these service providers and enter into Data Processing Agreements with them, in compliance of Article 28 of the GDPR. These third-party service providers are not allowed to use or disclose your personal data except as necessary to provide the services on our behalf or to comply with legal requirements.

6. International transfers

The recipients of your personal data can be located, in some particular cases, outside the European Union. In those cases, we require them to comply with the applicable data protection requirements. Therefore, we only transfer your personal data to a third country or international organization if those provide appropriate safeguards, namely by using Standard Contractual Clauses (SCC) adopted by the (more information available here). You may obtain a copy of Sigma’s required measures by contacting our DPO at dpo@sigma-ai.com.

7. Technical and organizational security measures

Sigma has appropriate policies and has put into place technical and organizational measures to safeguard and protect your personal data against illegal or unauthorized access, loss or accidental destruction, damage, use and illegal or unauthorized disclosure.

In any case, please note that any transmission of data through the Internet is not completely secure and, as such, must be carried out at your own risk. Although we will do our best to protect your personal data, Sigma cannot guarantee the security of the personal data transmitted through this Website.

8. Your rights

You have the following rights, which depend on our reason for processing your information:

a. Right of access: you can ask us access to, and copies of, your personal data;

b. Right to rectification: you can ask us to amend your data if you think it is inaccurate and ask us to add more information if you think it is incomplete;

c. Right to erasure: you can ask us to delete your personal data if it is no longer necessary for the purposes identified above, if you object to the processing when we rely on legitimate interests, if your data has been unlawfully processed or for the compliance with the applicable legislation;

d. Right to restriction: you can ask us to restrict of processing if you contest the accuracy of your personal data, if it is unlawful and you oppose the erasure, if you need it for the establishment, exercise or defense of legal claims or if you have exercised your right to object;

e. Right to object: you can object to the processing of your personal data so that we stop processing it;

f. To opt out of receiving marketing communications at any time

9. For the exercise of these rights, you must properly identify yourself and contact DPO at dpo@sigma-ai.com.Finally, we inform you that you have the right to file a claim before the responsible data protection regulatory authority, in particular, before the Spanish Data Protection Agency (https://www.aepd.es/es).Changes to this Notice

We may update this privacy notice from time to time to reflect changes in our practices or services. When we change this notice in a material way, we will update the version date below. For significant changes to this notice we will try to give you reasonable notice unless we are prevented from doing so. Where required by law we will seek your consent to changes in the way we use your personal information. We recommend that you check this page from time to time to inform yourself of any changes in this privacy notice.

Date of update: July 28, 2021

10. Keeping your personal data up-to-date

We maintain the accuracy and completeness of the personal data we hold. It is important that you inform us of any updates to your contact details or other personal data so that we have the most up-to-date information about you. Please, contact dpo@sigma-ai.com